$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json) Hash identifier: uYFH6QYzjbA93fSamQ0pOj4RzUM/A8EIegG1HfYYpq4= Subject key identifier: 58:1B:C1:18:66:4A:D8:B2:9D:65:F7:35:27:E0:63:E4:95:B0:CB:30 Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft Manifest number: 86 Signing time: Sun 19 Oct 2025 09:57:38 +0000 Manifest this update: Sun 19 Oct 2025 09:57:37 +0000 Manifest next update: Sun 26 Oct 2025 09:57:37 +0000 Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: 8EMx6b4RsivpFO2omCj1l8gUWIZAGid7j5xVmM0efpc=) 2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: 8xExEFAiYA/8lFGHuqLYzWCAWTLUpOx+eEmK9KK5c0M=) 3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: 2GRtPqItvUjTSj4+s6HmnNB8Os7tS39gLre6A6tNJzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Validity Not Before: Oct 19 09:57:37 2025 GMT Not After : Oct 26 09:57:37 2025 GMT Subject: CN=68f4b612-c801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2a:7d:02:ef:af:10:5f:23:e0:9d:b6:a7:0b: f1:7d:96:28:22:4b:b0:c8:de:a2:20:96:5c:62:3f: a5:4f:e2:4a:28:41:91:14:f5:4e:8a:85:76:ab:79: 43:fb:e6:d8:c0:1e:c8:b8:cb:a8:3a:8c:eb:e3:aa: 98:05:5d:d9:89:7e:9f:90:d1:b1:d8:85:c3:33:3e: 73:69:f1:e8:64:94:97:a3:20:93:1a:c9:c3:fc:9a: 60:23:24:b7:8d:f6:7b:67:dd:12:fa:e3:c9:31:8f: 2a:d9:4d:75:a0:80:4d:2e:5c:b2:c1:e4:7b:97:0f: b8:77:45:96:d1:09:6e:7e:b4:84:b4:55:10:09:76: f9:99:29:96:a5:47:ef:7d:ef:40:58:b8:58:be:52: 23:84:d2:15:12:67:3c:9b:38:02:0f:5d:df:a2:d6: ac:50:ac:f6:2a:76:f5:85:2a:fc:8d:34:f9:be:cf: 3f:9d:35:07:a9:26:c7:6f:2d:30:87:87:59:e8:8f: 1c:ae:3c:88:76:22:81:b6:87:68:82:a4:77:c9:eb: c0:93:fb:b3:8f:b9:89:4a:fc:a8:ee:79:60:9c:d4: 8b:ec:83:fd:25:59:b2:69:de:16:7f:8c:66:f5:18: dc:38:24:5f:ee:a5:0c:95:12:78:e6:ac:fb:26:34: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1B:C1:18:66:4A:D8:B2:9D:65:F7:35:27:E0:63:E4:95:B0:CB:30 X509v3 Authority Key Identifier: keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:76:1c:dd:ff:13:c1:91:a3:62:4c:91:45:58:0d:8e:3d:74: 4c:dd:1b:75:03:87:5e:eb:fd:c7:ba:7b:71:b1:7d:9b:79:d1: 78:97:9c:64:a3:46:98:27:7c:c4:3e:0b:03:38:c7:6f:5f:63: ea:54:57:f6:8f:96:10:93:38:c8:48:d9:98:22:3c:86:00:b4: b5:d2:09:7f:02:fb:4a:65:26:43:b2:f9:8b:65:7f:43:37:5d: 8a:6b:64:42:e8:cc:be:f4:28:4c:fc:63:59:3e:01:7c:b3:8f: 90:c8:43:44:a4:f0:1a:64:2e:4a:ca:e1:5a:be:10:bb:84:97: f7:20:1f:1d:4f:7b:01:e6:61:92:b4:81:60:75:29:fa:26:80: a4:59:88:c1:14:94:35:8c:3a:4a:d4:45:69:bd:81:3e:68:d1: c8:02:66:e5:5e:2f:bb:3e:fb:d4:fc:02:95:0d:fc:28:d7:f7: 12:4d:6e:37:8c:ca:da:68:f0:59:2a:cf:7a:b8:2a:95:5c:49: e7:07:3d:3a:e1:0e:b1:10:4d:7e:54:7a:82:18:32:d9:37:b9: 21:b6:8e:05:3c:87:39:42:eb:89:32:fd:39:79:8a:87:08:37: 35:6a:c9:c8:88:06:c7:c7:cc:b8:39:53:55:bc:a7:78:a9:1a: f4:3a:3d:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE1NTcxMTAvBgNVBAUTKDY3Q0UzRDlDMjZBMTRCQ0RGRjlCMzM5NEQzMzU1NzY2 ODIxOEExNTYwHhcNMjUxMDE5MDk1NzM3WhcNMjUxMDI2MDk1NzM3WjAYMRYwFAYD VQQDEw02OGY0YjYxMi1jODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCp9Au+vEF8j4J22pwvxfZYoIkuwyN6iIJZcYj+lT+JKKEGRFPVOioV2q3lD ++bYwB7IuMuoOozr46qYBV3ZiX6fkNGx2IXDMz5zafHoZJSXoyCTGsnD/JpgIyS3 jfZ7Z90S+uPJMY8q2U11oIBNLlyyweR7lw+4d0WW0QlufrSEtFUQCXb5mSmWpUfv fe9AWLhYvlIjhNIVEmc8mzgCD13fotasUKz2Knb1hSr8jTT5vs8/nTUHqSbHby0w h4dZ6I8crjyIdiKBtodogqR3yevAk/uzj7mJSvyo7nlgnNSL7IP9JVmyad4Wf4xm 9RjcOCRf7qUMlRJ45qz7JjQDkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgbwRhm StiynWX3NSfgY+SVsMswMB8GA1UdIwQYMBaAFGfOPZwmoUvN/5szlNM1V2aCGKFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTU1Ny85MjY4M0UzQUU4 NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4M19tek9VMHpWWFpvSVlv VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9WWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTU1Ny85MjY4M0UzQUU4NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4 M19tek9VMHpWWFpvSVlvVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCedhzd/xPBkaNiTJFFWA2OPXRM3Rt1A4de6/3HuntxsX2bedF4l5xk o0aYJ3zEPgsDOMdvX2PqVFf2j5YQkzjISNmYIjyGALS10gl/AvtKZSZDsvmLZX9D N12Ka2RC6My+9ChM/GNZPgF8s4+QyENEpPAaZC5KyuFavhC7hJf3IB8dT3sB5mGS tIFgdSn6JoCkWYjBFJQ1jDpK1EVpvYE+aNHIAmblXi+7PvvU/AKVDfwo1/cSTW43 jMraaPBZKs96uCqVXEnnBz064Q6xEE1+VHqCGDLZN7khto4FPIc5QuuJMv05eYqH CDc1asnIiAbHx8y4OVNVvKd4qRr0Oj0E -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:01 2025 by rpki-client